This page has been translated using TexTra by NICT. Please note that the translation may not be completely accurate.If you find any mistranslations, we appreciate your feedback on the "Request form for improving the automatic translation ".

Study Group on Installation of Smartphones on function in My Number Card (8th Meeting)

Outline

  • Date and time: August 20, 2026 (Thursday) 13:00 to 14:30
  • Venue: Online
  • Agenda:
    • 1. Opening
    • 2. Administrative Communications
    • 3. Proceedings
      • 3.1 Smartphone Installation in function, My Number Card
      • 3.2. Operational Status of My Number Card on iPhone
      • 3. 3. Operation Status of electronic certificates on Android smartphones Loading Service
      • 3.4. Basic Policies for My Number Card on Android
      • 3.5. Android Vulnerability Test Report Evaluation Results
    • 4. Notes
    • 5. Adjournment

Data

Summary of the proceedings

Date and time

Thursday, August 20, 2026, from 13:00 to 14:30

Place

Holding online

Attendee

Knowledgeable person

  • Chairman
    • Obi clan
  • Acting chairman
    • Ōta clan
  • Constituent
    • Taki clan
    • Nomura clan
    • Miyauchi clan
    • Moriyama clan
    • Kanda clan
    • Sakae Fuji

Local governments and industry groups

  • Maebashi-shi
    • Mitsuyoshi, Director of Business Improvement Office, Information Policy Division, Future Creation Department
  • Kobe-shi
    • Digital Strategy Department, Takagi Planning and Coordination Bureau (in charge of online administration)
  • Japan Agency for Local Authority Information Systems
    • Deputy Director, Matsumoto Individual Number Center
    • Hayashi Individual Number Center Public Personal Authentication Senior Advisor, New System Development Department
  • Telecom Services Association
    • Ihara MVNO Consumer Affairs Subcommittee Chief
    • Kainuma clan
  • Telecommunications Carriers Association
    • SAJI General Manager
    • Ikeda clan
    • Maruyama clan
    • Bando clan
    • Fujita clan
    • Toyama clan
    • Matsui clan
    • Kuriyama clan
    • Otohata clan
    • Sasaki clan
    • Koizumi clan
    • Yamashita clan
    • Maebatake clan
    • Sato clan
    • Agematsu clan
    • Ōta clan
    • Watanabe clan
    • Inoue clan
    • Hangai clan
    • Harayama clan
    • Osawa clan

Observer

  • FeliCa Networks Corporation
  • Graduate Institute Of Information Security
  • xID Inc.
  • NEC Corporation
  • NTT DoCoMo Business Corporation
  • Hitachi, Ltd.
  • General Incorporated Association Reuse Mobile Japan
  • The Japan Information Economy social promotion association
  • Japan Mobile Phone Distributors Association
  • TRUSTDOCK Co., Ltd.

Relevant ministries and agencies

  • Ministry of Internal Affairs and Communications
    • Director, My Number System Support Office, Resident Systems Division, Local Government Administration Bureau, Ministry of Internal Affairs and Communications

Secretariat, etc.

  • Digital Agency
    • Group of Service for Citizens
      • Deputy Director-General Kamikariya
      • Director for Policy Planning Kiriyama and others

Main opinions from members (summary)

Appendix 1: Smartphone installation at My Number Card function; Appendix 2: Operation status of "My Number Card on iPhone"; Appendix 3: Operation status of "electronic certificates on Android smartphones Equipped Service"

  • Speaker: ISO/IEC 18013-7 Annex C as a follow-up to international trends in My Number Card on iPhone, it was a very good start because it is more convenient than Android, but it seems that the growth in the number of ownership has been slowing down continuously since April. It is impossible to judge whether or not the tightening of the identity verification in non-face-to-face cases under the Act on the Prevention of Abusive Use of Mobile Phones has had an impact based on the figures alone. I assume that the number of tax returns probably increased in February and March. I would like to know if you have a grasp of the trend based on funnel analysis, etc., on where they leave before they actually install My Number Card on iPhone. In addition, I would like to know if you have a grasp of the main usage of the approximately 8.2 million cases actually held and the percentage that they are not used. The purpose of my question is that it will be a guideline for future PR activities and UX improvement.
    • Secretariat: Regarding As you may have guessed, the large growth in February and March is due to final tax returns. Just like My Number Card, applications tend to increase around this time of the year. We estimate that the tightening of identity verification requirements under the Act on the Prevention of Abusive Use of Mobile Phones had no impact, because a transitional measure period has been set and is not mandatory at present, and the measures are taken only at electronic certificate in My Number Card. As for service funnel analysis using My Number Card on Smartphone, including those provided by private sector, we have not yet introduced a tool for data analysis, and we do not have a quantitative understanding of the points where user defection is occurring. Therefore, we recognize that it is necessary to proceed with the analysis in the future. As for the qualitatively understood part, the possible causes include the photographing of the face at the time of installing My Number Card on iPhone and the input of electronic certificate password for signing. Therefore, we would like to be able to obtain quantitative values in the future.
  • Speaker: ISO/IEC 18013-7 Annex C as a follow-up to international trends in My Number Card has the same validity as a registered seal and is very important. If you look at the leaflet in Document 1, you can see that the advantages are being appealed and that you want to promote the use of electronic signatures. However, I would like to see the importance of electronic signatures stated somewhere. Is it correct to assume that a message stating the importance will appear when installing electronic signatures?
    • Secretariat: Regarding Based on what you pointed out, we are clearly explaining that electronic signatures have the same effect as registered seals by using a note when installing electronic certificate on smartphones. We will show the screen at a later date. In addition, we are making efforts to make it as known as possible to signature verifiers by including it in the ministerial certification procedures and guidelines. In addition, we will promptly provide guidance if we find any situation that seems to be insufficient. The leaflet in Document 1 is an existing poster, so it is difficult to include a note equivalent to a registered seal. However, since there are many opportunities to publicize it on websites, etc., we will further ensure that it is effectively communicated to all citizens who register and businesses who start using their signatures.
  • Speaker: ISO/IEC 18013-7 Annex C as a follow-up to international trends in Digital Authentication App is compatible with My Number Card on iPhone, and we interpreted this to mean that there are two cases at the same time: the case where the user can directly present the My Number Card stored in Apple Wallet or Google Wallet, and the case where the user presents the Authentication App via Digital Authentication App. The leaflets in Exhibit 1 show that My Number Card on iPhone is described as "providing administrative services in a simple, safe and convenient manner," which suggests that is considered to be centered on administrative procedures to some extent. Digital My Number Card on iPhone seemed to be differentiated from the private sector, but on the other hand, it was explained that the use of Automated Gates is increasing among private sector services. We felt that it would be a good idea to publicize Automated Gates in a way that makes it easy for the users, i.e. citizens and business operators, to understand which is serving what role. We would like to hear your thoughts on this point.
    • Secretariat: Regarding As you are aware, private platform operators are already leading the way in signature services. Since many private platform operators do not use 4 pin user verification, digital Authentication App services are supporting the private sector by specializing in user verification so as not to put pressure on the private sector. Incidentally, on August 25, 2026, Digital Agency will introduce an app called MynaApp that integrates the Mynaportal app and digital Authentication App. At that time, the function of the digital Authentication App, which had previously supported only My Number Card, will be enhanced to support My Number Card on iPhone as well. After the same date, the app will be positioned as an app-API service provided by Digital Agency for the purpose of using My Number Card equipped on smartphones cheaply and smoothly. On the other hand, since My Number Card on iPhone and My Number Card on Android are equipped with My Number Card's smartphones, I think they initially focused on administrative services, but now they are supporting both administrative services and private services as a social infrastructure through identity verification and attribution certification confirmation. We will share the materials later.
  • Speaker: ISO/IEC 18013-7 Annex C as a follow-up to international trends in document, there were statistics on the number of installed electronic certificate cards for smartphones for My Number Card on iPhone and Android. I would like to ask if you have any supplementary information on what qualitatively led to the installation of My Number Card cards for smartphones. I think the most important point for putting cards on smartphones is that there is no need to carry the card itself outside. There was an argument that the number of cases where IC cards were installed increased because of tax returns. On the one hand, it is assumed that people will go to the tax office, receive a digital tax return subsidy, and finally make a identity verification from their smartphones. On the other hand, when filing tax returns from home, I think there is a point of view that it is sufficient to have the card at home. At this meeting, if we discuss mainly health insurance cards, etc., which are used when people physically go out and use them, I think we can put more emphasis on promoting their widespread use. If there is additional information based on questionnaires and interviews, I would like to know what triggered the installation.
    • Secretariat: Regarding As you pointed out, we think it is very important to promote the merits that people always carry their smartphones with them and do not need to carry a My Number Card. We emphasize the merits that it is a minor emergency and that in the event of disasters, it is possible to check prescription drugs and apply for a disaster victim certificate via a Mynaportal from a smartphone. Minor emergency has been available since April 2026, but electronic certificate for smartphones is based on the premise that users themselves authenticate through terminals, and we are considering what kind of measures can be taken when a person is unconscious at the site of emergency. The inability to authenticate without a PIN has become a problem. We are promoting people to carry a My Number Card with minor emergency in mind, and if minor emergency also becomes compatible with smartphones, it will be possible to say that everything that can be done with a card can also be done with a smartphone.
  • Speaker: ISO/IEC 18013-7 Annex C as a follow-up to international trends in Since the start of this review, we have been discussing whether it is possible to properly switch from expired to new smartphones when changing smartphones. We would like to check whether there are any particular problems in the current situation. I think there was a system to switch even when you forgot to delete the old terminal and started using a new terminal, but is that system generally solving the problem? Or, I would like to ask if there are a considerable number of telephone calls for consultation to the specialized dial.
    • Secretariat: Regarding , but we are not currently accepting inquiries about problems with smartphones with electronic certificate installed on sold terminals. I think Android has been concerned about the certificates remaining even after resetting the terminals, but we have issued guidelines to reuse business operators and have basically taken the procedure to have them delete the certificates properly. Furthermore, in the case of iPhones, we have confirmed that the certificates are deleted when the terminals are reset, so we believe that we have not been in a situation that would cause particular concern to users.
  • Speaker: ISO/IEC 18013-7 Annex C as a follow-up to international trends in We have the impression that small medical institutions have been slow to install readers that can be used with smartphones. We have been making great efforts in this area, but ideally, smartphones can do everything that cards can do, and we would like to see more smartphone support.
    • Secretariat: Regarding , and make it even more thorough.

Appendix 4: Basic Policies of My Number Card on Android

  • Speaker: ISO/IEC 18013-7 Annex C as a follow-up to international trends in Document 4, Mynaportal App and MynaApp are distinguished as a comparison of usage methods. While Mynaportal App and Digital Authentication App will be integrated into MynaApp on August 25, 2026, it will take a while (around the fall of 2026) to provide it under the brand of "My Number Card on Android." Our understanding is that there will be a slight delay in the timing. We would like to confirm whether it is correct to believe that this delay in timing is not a problem, particularly from the perspective of users.
    • Secretariat: Regarding On August 25, 2026, we will release MynaApp as an updated version of the Mynaportal app, but at the same time, we will not change the name of the electronic certificate service for smartphones in Android. When updating to MynaApp, the electronic certificate for smartphones will not expire, and the electronic certificate for smartphones will be carried over just like the updates of the Mynaportal app to date. We will change the name of the service to coincide with the release of Electromagnetic Records Substituted for Cards around the fall of 2026. For terminals that can be equipped with Electromagnetic Records Substituted for Cards, we plan to provide a guide to the New function. For terminals that have been equipped with electronic certificate for smartphones and can only use the function Limited Edition, we plan to provide a guide to add the card art to the wallet. For other parts, we will make preparations so that users can continue to use the service without doing anything in particular. Both with the release on the same day and with the change of service name for the My Number Card on Android function Limited Edition, we believe that users can basically use the service seamlessly.
  • Speaker: ISO/IEC 18013-7 Annex C as a follow-up to international trends in : In Document 4, as a measure against vulnerabilities, Android states that it will immediately restrict the use of chips, applets, etc. when serious vulnerabilities are identified in them. In last year's Study Group (2025), it was announced that's security patches would be used and that their use would be controlled according to their levels. We gave a comment to the effect that careful consideration is needed because if this is done, there is a possibility that unrelated vulnerabilities will lead to the sudden disabling of card substitute electromagnetic records that should have been set on the smartphones of citizens at a certain time. As a result, it has become a policy to restrict the use of chips, applets, etc. only when serious vulnerabilities directly related to them are identified. We consider this very good. We would like you to proceed with this policy. At the same time, regarding fraud detection, it is stated that we will respond immediately to future trends. However, we would like you to monitor the status of Android's ecosystem on a daily basis, obtain information as soon as possible, and promote fraud countermeasures.
  • Speaker: ISO/IEC 18013-7 Annex C as a follow-up to international trends in Material 4 describes that it corresponds to ISO/IEC 18013-7 Annex C as international trend follow-up and W3C DCAPI specifications. Looking only at this page, it seems difficult to understand when this is in terms of time axis, but it is my understanding that when the provision of My Number Card on Android can be started, the implementation on the Android side will also correspond to ISO/IEC 18013-7 Annex C. As a result, both My Number Card of iPhone and Android understand that they correspond to W3C DCAPI, and in addition to Verify with Wallet, which is an API for native apps provided by Apple, Google also supports native APIs, so I think it is a very grateful story that is welcomed by service providers in the ecosystem. As a result, both of iPhone and understand that they correspond to W3C DCAPI, and in addition to Verify with Wallet, which is an API for native apps provided by Apple, Google also supports native APIs, so I think it is a very grateful story that is welcomed by service providers in the ecosystem. Although it is not mentioned in the materials, there is a specification called CTAP PXP that is promoted by the FIDO Alliance with W3C, ISO and OpenID Foundation. I understand that it can be used from a PC for cross device use, and I think that it can be used for private sector use. My Number Card on Android My Number Card
  • Speaker: ISO/IEC 18013-7 Annex C as a follow-up to international trends in The application will be changed from electronic certificates on Android smartphones to My Number Card on Android this time. Is it correct to understand that the current smartphone electronic certificate on the Secure Element will be maintained, and the card substitute electromagnetic record mdoc will be added on top of that? Also, regarding the existing JPKI applet, are there any changes to the storage location and access controls of the electronic certificate and private key? Of the information such as name, address, and My Number, I would like to confirm what exactly is stored in the terminal as mdoc, and how it is safely protected.
    • Secretariat: Regarding is used to make it easier for My Number Card on Android users to understand, the system shows a summary of records to which card-substituting electromagnetic records are added later. The system configuration using GP-SE and applets related to electronic certificate for smartphones have not been touched at all. Regarding the protection form of mdoc, since mdoc is a copy of My Number Card, all information stored in My Number Card, such as basic four information, face photo, and My Number, is basically stored in mdoc.
  • Speaker: ISO/IEC 18013-7 Annex C as a follow-up to international trends in in an easy-to-understand manner, but also to convey the mechanism and security to those who are familiar with it to some extent, as well as to engineers. In addition, I think it would be better to have a document that explains the security more specifically, not only the explanation of protecting with a secure chip, but also the differences between the old and new systems and signatures equivalent to registered seals.
    • Secretariat: Regarding safety, not limited to this issue, there are pages on the Digital Agency website that promote safety. We also believe that it is very important to use them with an understanding of safety even in leaflets, etc. We believe that the current situation is one where measures are not sufficient in some parts, and based on the points raised, we will make efforts to make it easy for the general public to understand that it is safe, and will promote information to the public.
  • Speaker: ISO/IEC 18013-7 Annex C as a follow-up to international trends in and W3C DCAPI specifications. From the current cross-section, this is understood to be the case. However, standard specifications are subject to change. Google, Appleand other business operators and vendors who implement them should follow suit and progress should be made. At that time, I would like you to proceed with the operation with sufficient awareness to avoid parting with the platform side or Galapagosization due to being left behind in the implementation. I would like you to keep in mind that we will not only catch up when changes occur, but also consider how we can respond, including budgetary measures.

Appendix 5: Android Vulnerability Inspection Report Evaluation Results

Members, etc. only

Greater Than